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- The MAILING DATE of this communicati n appears n the cover sheet with the correspondenc address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 . 1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )I3 Responsive to communication(s) filed on 15 March 2001 . 
2a)D This action is FINAL. 2b)£3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) [3 Claim(s) 1-10 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) [3 Claim(s) 1-10 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
Priority under 35 U.S.C. §§119 and 120 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)D All b)Q Some*c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

13) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 11 9(e) (to a provisional application) 

since a specific reference was included in the first sentence of the specification or in an Application Data Sheet. 
37 CFR 1.78. 

a) □ The translation of the foreign language provisional application has been received. 

14) D Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 since a specific 

reference was included in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1 .78. 

Attachment(s) 

1 ) ^ Notice of References Cited (PTO-892) 4) □ Interview Summary (PTO-41 3) Paper No(s). . 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) 5) □ Notice of Informal Patent Application (PTO-152) 

3) 03 Information Disclosure Statement(s) (PTO-1449) Paper No(s) 4. 9. 10 . 6) □ Other: 
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Status of Claims 

1. Claims 1-10 have been examined. 

Claim Rejections ■ 35 USC §112 

2. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

3. Claims 1-3 are rejected under 35 U.S.C. 1 12, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention. 

Claim 1 recites, "said second payment account number not being a 
transaction number". However, the method of claim 1 is directed to secure 
transactions. Further, claim 2 recites, "requesting authorization for payment of 
said transaction with said second payment account number." Hence, the 
limitation of the second payment account number not being a transaction number 
is inaccurate and in contradiction to its use within the Applicant's system. 

Claims 2 and 3 are also rejected as they depend from claim 1 . 

Claim 8 recites the limitation "... for the corresponding public key" in lines 
2 and 3. There is insufficient antecedent basis for this limitation in the claim. 
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Claim Rejections - 35 USC § 102 



4. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this 
Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

5. Claims 1-3 are rejected under 35 U.S.C. 102(e) as being clearly 
anticipated by Walker et al., U.S. Patent No. 6,163,771. 

- As per claims 1-3, Walker et al. teach a method for conducting 
transactions comprising: 



• assigning to a purchaser a first payment account number having a 
status that changes over time, providing a second payment account 
number not being a transaction number and having an encryption 
key assigned thereto (figures 7 and 13; column 7, lines 20-26) 

• requesting authorization for payment of said transaction with the 
second number and not the first, identifying said purchaser's first 
payment number in response to the authorization request and 
responding to the authorization request based upon the status of 
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the first number, based on a credit balance that changes over time 
(figures 3B, 9A, and 10-11B; column 7, lines 20-26) 
• the response to the authorization request is based on cryptographic 
code based on said encryption key (figures 6 and 9A-B; column 7, 
lines 28-51) 



Claim Rejections - 35 USC § 103 



6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 4-7, 9, and 10 are rejected under 35 U.S.C, 103(a) as being 
unpatentable over Walker et al., U.S. Patent No. 6,163,771. 

As per claims 4-7, 9, and 10, Walker et al. teach a method for conducting 
a transaction comprising: 

• assigning to a purchaser a first payment account number having a 
status that changes overtime, providing a second payment account 
number not being a transaction number and having an encryption 
key assigned thereto (figures 7 and 13; column 7, lines 20-26) 
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• requesting authorization for payment of said transaction with the 
second number and not the first, identifying said purchaser's first 
payment number in response to the authorization request and 
responding to the authorization request based upon the status of 
the first number, based on a credit balance that changes over time 
and without transmitting the first account number (figures 3B, 9A, 
and 10-11B; column 7, lines 20-26) 

• the response to the authorization request is based on cryptographic 
code based on said encryption key (figures 6 and 9A-B; column 7, 
lines 28-51) 

• providing a purchaser with a secure payment application which 
includes a cryptographic key that is unique to the first account 
number and a second or pseudo account number of the same 
length as the first (figures 6 and 7; column 6, lines 30-53; 
column/line 7/27-8/36) 

• providing a purchaser with merchant data and generating a 
message authentication code as a function of merchant data and 
said cryptographic key and providing a merchant with the code and 
the pseudo account number (figure 3B; column 6, lines 15-28; 
column 9, lines 30-36) 
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• cryptographically processing the pseudo account number to 
produce the first account number (column/line 8/1-9/9) 

• differentiating the pseudo number from the first number by special 
identifier within the pseudo account number, and by data within a 
transaction record (figures 7, 8 and 13; column 7, lines 37-51; 
column 8, lines 9-36) 

• cryptographic key is a secret key (abstract) 

Walker et al. do not specifically recite verifying that merchant data is correct. 
However, it would have been at least obvious to one of ordinary skill for a user or 
merchant to verify the amount to ensure that the user is being billed properly, and 
for the user, merchant or credit card issuer to verify the correctness of the 
merchant ID in order to prevent transaction cancellation based on an incorrect 
merchant ID. Regarding DES and DESX, Walker et al. implement their system 
using cryptographic algorithms (column 2, lines 30-34; column 7,lines 3-8). 
Hence, it would have been obvious to one of ordinary skill to encrypt the pseudo 
account number using RSA, DES or its variants such as DSA or DESX. 

8. Claim 8 is rejected under 35 U.S.C. 103(a) as being unpatentable over 

Walker et al., U.S. Patent No. 6,163,771 as applied to 4, and in further view of 
Lee et al., U.S. Patent No. 6,018,717. 
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As per claim 8, Walker et al. teach a message authentication code that 
comprises a digital signature generated by a secure payment application (column 
8, lines 9-36). However, Walker et al. do not specifically recite public key 
certificates. Lee et al. teach a method for performing secure transactions using 
card unique certificates that are associated with a public key of a private/public 
key pair (column/line 1 1/15-12/18). Therefore, it would have been obvious to one 
of ordinary skill to combine the teachings of Walker et al. and Lee et al. in order 
to uniquely associate a transaction message with a user (717, column/line 
10/38-1 1/13) and to, in the event the private key (771 , abstract) is obtained by a 
malicious user, to provide protection against fraud by using different keys to 
encrypt and decrypt a transaction message (717, column/line 10/38-1 1/13). 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to 

applicant's disclosure: 

• Chen et al. teach an electronic payment using card specific digital 
wallets 

• Franklin et al. teach an online commerce card using proxy identifiers 



Application/Control Number: 09/809,367 
Art Unit: 3621 



Page 8 



1 0. Any inquiry concerning this communication or earlier communications from 

the Examiner should be directed to Calvin Loyd Hewitt II whose telephone 
number is (703) 308-8057. The Examiner can normally be reached on Monday- 
Friday from 8:30 AM-5:00 PM. 

If attempts to reach the Examiner by telephone are unsuccessful, the 
Examiner's supervisor, James P. Trammell, can be reached at (703) 305-9768. 
Any response to this action should be mailed to: 
Commissioner of Patents and Trademarks 
c/o Technology Center 2100 
Washington, D.C. 20231 

or faxed to: 

(703) 305-7687 (for formal communications intended for entry and 
after-final communications), 

or: 

(703) 746-5532 (for informal or draft communications, please label 
"PROPOSED" or "DRAFT") 

Hand-delivered responses should be brought to Crystal Park 5, 
2451 Crystal Drive, 7th Floor Receptionist. 

Any inquiry of a general nature or relating to the status of this application 
should be directed to the Group receptionist whose telephone number is (703) 
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308-1113. 



Calvin Loyd Hewitt II 
November 24, 2003 





/JOHN W. HAYES 
PRIMARY EXAMINER 



